life-tut[.]ru
“Кракен ссылка тор на сайт - kra26.cc, kra26.cc, kra27.cc, kra27.at, kra28.cc, kra28.at, kra29.cc, k…”
life-tut.ru — Konten tidak tersedia. Peniruan identitas merek: Kraken; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 14/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); PhishDestroy score 92/100. Registrar: REGRU-RU.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain life-tut.ru indicates it was actively impersonating the Kraken cryptocurrency exchange platform as of its registration on January 27, 2025. The domain was registered through REGRU-RU, a registrar frequently associated with malicious infrastructure, and resolved to the IP address 193.105.134.30, hosted on AS42237 (w1n ltd) in Sweden. Infrastructure analysis reveals the use of nameservers ns1.regerey.com and ns2.regerey.com, which have been previously linked to other suspicious domains. The page title, partially captured as 'Кракен ссылка тор на сайт - kra26.cc, kra26.cc, kra27.cc, kra27.at, kra28.cc...', explicitly references multiple Kraken-branded domains, suggesting an intent to redirect victims to fraudulent mirror sites.
While the exact content of the page remains unanalyzed, the presence of these references aligns with known brand impersonation tactics targeting cryptocurrency users. The domain was flagged by 14 of 95 security vendors on VirusTotal, though this detection count reflects assessments prior to its takedown. Additionally, it appeared on a single security blocklist, specifically PhishDestroy, and received a trust score of 0/100 from Gridinsoft, further corroborating its malicious classification. No SSL certificate was detected for life-tut.ru, a common omission in low-effort phishing campaigns that may trigger browser warnings and reduce victim conversion rates.
The domain is currently offline, though its prior infrastructure and registrar history suggest potential for reemergence under similar or altered domains. Defenders are advised to monitor for newly registered domains under REGRU-RU or utilizing the same nameserver infrastructure, particularly those resolving to the same IP range or ASN. Network-level blocking of 193.105.134.30 and associated domains referenced in the page title (e.g., kra26.cc, kra27.at) may mitigate residual risk.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive